da06ad28c7c4135864dc16963957cf70N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

da06ad28c7c4135864dc16963957cf70N.exe
Size

24KB
MD5

da06ad28c7c4135864dc16963957cf70
SHA1

105d2f47f1d8fdd7cafbfc4351bd372586521a6a
SHA256

aee572c259d70473c34dae0726f5c462b3e558c9c5152ddfd7da63a9f426f260
SHA512

76ac30384db3d56582bc7e2c2282a1940c4488ef32cbfe434602089e812f17c10c52f026dcbb03505c1f26395b90dbc8689f002c9907340ca86568ff812a4a44
SSDEEP

384:2E9DJvJfX1T+N+kLXgfwAGRhlOt/Qy6/u2WuFRZviXRs9NfNrR:28DJvtX13k8wVlOt4yT2TXKWNH

Score

1^/10

Malware Config

Signatures

Files

da06ad28c7c4135864dc16963957cf70N.exe
.dll windows:5 windows x86 arch:x86

3bc23b4e5129e8660b461914fabc29d8

Code Sign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

28/07/2020, 00:00

Not After

18/03/2029, 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

17:c8:68:df:f5:28:83:d7:49:d8:3e:ad
Certificate

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

31/08/2023, 09:37

Not After

31/08/2026, 09:37

Subject

CN=OKWare Co.\, Ltd,O=OKWare Co.\, Ltd,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

38:63:de:f8
Certificate

Issuer

CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net

Not Before

24/12/1999, 17:50

Not After

24/07/2029, 14:15

Subject

CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:da:13:ff:00:00:00:00:51:ce:0d:f7
Certificate

Issuer

CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net

Not Before

22/07/2015, 19:02

Not After

22/06/2029, 19:32

Subject

CN=Entrust Timestamping CA - TS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

07:d7:13:53:da:25:61:b4:61:e9:90:47:8a:4c:ce:04
Certificate

Issuer

CN=Entrust Timestamping CA - TS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Not Before

19/01/2024, 16:46

Not After

01/06/2029, 00:00

Subject

CN=Entrust Timestamp Authority - TSA1,O=Entrust\, Inc.,L=Ottawa,ST=Ontario,C=CA

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

63:51:f4:01:29:93:64:2b:81:d5:14:a7:7a:6c:5d:74:9e:19:fd:28:4e:71:24:ff:16:16:e3:af:3c:74:d4:7c
Signer

Actual PE Digest

63:51:f4:01:29:93:64:2b:81:d5:14:a7:7a:6c:5d:74:9e:19:fd:28:4e:71:24:ff:16:16:e3:af:3c:74:d4:7c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\projects\ffmpeg\platform-svn\ffmpeg-src\ext\ati\Utility\utility-vc2008\Release\Utility.pdb

Imports

kernel32

GetCurrentProcess
GetLocalTime
GetProcessId
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

msvcp90

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

msvcr90

_stat64i32
??2@YAPAXI@Z
_vsnprintf
_unlock
__dllonexit
_encode_pointer
??0exception@std@@QAE@ABV01@@Z
_onexit
_decode_pointer
_malloc_crt
free
_encoded_null
_initterm
fwrite
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
_except_handler4_common
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
_stricmp
??3@YAXPAX@Z
fopen
_invalid_parameter_noinfo
fflush
_initterm_e
sprintf_s
_lock
__CxxFrameHandler3
_CxxThrowException

Exports

Exports

??0CUtility@@QAE@XZ
??4CUtility@@QAEAAV0@ABV0@@Z
?fnUtility@@YAHXZ
?nUtility@@3HA
Log
SetEncrypt
SetLogLevel
SetLogfile
_DllMain@12

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 990B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3bc23b4e5129e8660b461914fabc29d8

Code Sign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54Certificate

Extended Key Usages

Key Usages

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47Certificate

Extended Key Usages

Key Usages

17:c8:68:df:f5:28:83:d7:49:d8:3e:adCertificate

Extended Key Usages

Key Usages

38:63:de:f8Certificate

Key Usages

58:da:13:ff:00:00:00:00:51:ce:0d:f7Certificate

Extended Key Usages

Key Usages

07:d7:13:53:da:25:61:b4:61:e9:90:47:8a:4c:ce:04Certificate

Extended Key Usages

Key Usages

63:51:f4:01:29:93:64:2b:81:d5:14:a7:7a:6c:5d:74:9e:19:fd:28:4e:71:24:ff:16:16:e3:af:3c:74:d4:7cSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

msvcp90

msvcr90

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 688B

.reloc Size: 1024B - Virtual size: 990B

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Certificate

17:c8:68:df:f5:28:83:d7:49:d8:3e:ad
Certificate

38:63:de:f8
Certificate

58:da:13:ff:00:00:00:00:51:ce:0d:f7
Certificate

07:d7:13:53:da:25:61:b4:61:e9:90:47:8a:4c:ce:04
Certificate

63:51:f4:01:29:93:64:2b:81:d5:14:a7:7a:6c:5d:74:9e:19:fd:28:4e:71:24:ff:16:16:e3:af:3c:74:d4:7c
Signer

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 688B

.reloc
Size: 1024B - Virtual size: 990B